General

  • Target

    b92cbe10656d7078f679b3ec5b51aa30N.exe

  • Size

    58KB

  • Sample

    240905-mbrbeayaql

  • MD5

    b92cbe10656d7078f679b3ec5b51aa30

  • SHA1

    a88ab70190ddca9c43c09f43aded7992d087e9f7

  • SHA256

    e91e976a252032f0c7b7b53a71b49dc9c5fa153b4dabdcf5e88c3d4aa01c0d03

  • SHA512

    0b5574645a06f15651aa91221c28a00345984fe27df195043685431b868066192013e445bbe40d3ddf0c2c0a51444689fa724acbffc403276d096adf887ae77d

  • SSDEEP

    1536:9Q8hoOAesfYvcyjfS3H9yl8Q1pmdBcxedLxNDoA+:ymb3NkkiQ3mdBjFo9

Malware Config

Targets

    • Target

      b92cbe10656d7078f679b3ec5b51aa30N.exe

    • Size

      58KB

    • MD5

      b92cbe10656d7078f679b3ec5b51aa30

    • SHA1

      a88ab70190ddca9c43c09f43aded7992d087e9f7

    • SHA256

      e91e976a252032f0c7b7b53a71b49dc9c5fa153b4dabdcf5e88c3d4aa01c0d03

    • SHA512

      0b5574645a06f15651aa91221c28a00345984fe27df195043685431b868066192013e445bbe40d3ddf0c2c0a51444689fa724acbffc403276d096adf887ae77d

    • SSDEEP

      1536:9Q8hoOAesfYvcyjfS3H9yl8Q1pmdBcxedLxNDoA+:ymb3NkkiQ3mdBjFo9

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

    • Detect Blackmoon payload

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v15

Tasks